Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
November 3, 2026
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says
Cybersecurity
Google Dismantles XCPE Botnet of 1.3 Million Android TV Boxes
Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says built the backdoor into firmware.
Refrigeration Attacks Hit Supermarkets in Six European Countries
A second wave of attacks on Danfoss refrigeration controls hit supermarkets in six European countries overnight, spoiling stock and raising set points to 55 C.
Attackers Exploit CVSS 10.0 Node-RED Flaw CVE-2026-58115
VulnCheck caught attackers exploiting CVE-2026-58115, a CVSS 10.0 missing-authentication flaw in Node-RED, to drop Linux bots on exposed Siemens devices.
BTCPay Server Hot Wallets Drained on Outdated Instances
Attackers drained Bitcoin and Litecoin hot wallets on BTCPay Server instances running version 2.4.1 or older, and the project urges updating to 2.4.7.
Trigger.dev Breach Exposes Customer Environment Variables
Trigger.dev disclosed that an attacker accessed environment variables belonging to a subset of its cloud customers, which can hold API keys and credentials.
cPGuard Update Channel Hijacked to Push Linux Server Backdoor
An attacker used stolen credentials to push a malicious script through OPSSHIELD's cPGuard update channel, installing a backdoor and stealing root SSH keys.
Russian and Ukrainian Emergency Alert Apps Hacked, Fake Warnings Sent
Ukraine's Air Alert app and Russia's Emergency Ministry app were hacked to send fake nuclear, chemical and missile warnings, though national alert systems held.
Unpatched CVSS 10.0 CryptoPayment Gateway Plugin Flaw Under Attack
Attackers are targeting CVE-2026-81648, an unpatched CVSS 10.0 flaw in the CryptoPayment Gateway WordPress plugin that exposes wallet credentials in cleartext.
Android November Bulletin Fixes 216 Flaws, Three Zero-Click RCEs
Google's November Android bulletin patches 216 vulnerabilities, including CVE-2026-58868 and two more zero-click critical RCE bugs; no exploitation reported.
Arista Patches Two CVSS 9.8 RCE Flaws Including HTTP2Shell
Arista fixed two CVSS 9.8 remote code execution flaws, HTTP2Shell in VeloCloud Orchestrator and a Linux kernel bug affecting access points and NDR devices.
Refrigeration Attacks Hit Supermarkets in Six European Countries
November 3, 2026
A second wave of attacks on Danfoss refrigeration controls hit supermarkets in six European countries overnight, spoiling stock and raising
Attackers Exploit CVSS 10.0 Node-RED Flaw CVE-2026-58115
November 3, 2026
VulnCheck caught attackers exploiting CVE-2026-58115, a CVSS 10.0 missing-authentication flaw in Node-RED, to drop Linux bots on exposed Siemens devices.
BTCPay Server Hot Wallets Drained on Outdated Instances
November 3, 2026
Attackers drained Bitcoin and Litecoin hot wallets on BTCPay Server instances running version 2.4.1 or older, and the project urges
Trigger.dev Breach Exposes Customer Environment Variables
November 3, 2026
Trigger.dev disclosed that an attacker accessed environment variables belonging to a subset of its cloud customers, which can hold API
cPGuard Update Channel Hijacked to Push Linux Server Backdoor
November 3, 2026
An attacker used stolen credentials to push a malicious script through OPSSHIELD’s cPGuard update channel, installing a backdoor and stealing
Russian and Ukrainian Emergency Alert Apps Hacked, Fake Warnings Sent
November 3, 2026
Ukraine’s Air Alert app and Russia’s Emergency Ministry app were hacked to send fake nuclear, chemical and missile warnings, though
Unpatched CVSS 10.0 CryptoPayment Gateway Plugin Flaw Under Attack
November 3, 2026
Attackers are targeting CVE-2026-81648, an unpatched CVSS 10.0 flaw in the CryptoPayment Gateway WordPress plugin that exposes wallet credentials in
Android November Bulletin Fixes 216 Flaws, Three Zero-Click RCEs
November 3, 2026
Google’s November Android bulletin patches 216 vulnerabilities, including CVE-2026-58868 and two more zero-click critical RCE bugs; no exploitation reported.
Arista Patches Two CVSS 9.8 RCE Flaws Including HTTP2Shell
November 3, 2026
Arista fixed two CVSS 9.8 remote code execution flaws, HTTP2Shell in VeloCloud Orchestrator and a Linux kernel bug affecting access
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.